* sys/netkey/key_debug.c: debugging with "setkey -x" probably becomes easier. this patch is from <archie@packetdesign.com>.
* sys/netkey/key_debug.c:
debugging with "setkey -x" probably becomes easier.
this patch is from <archie@packetdesign.com>.

* sys/netkey/key.c:
the order of searching SA table for packets is fixed.
the kernel might select dying SAs when the kernel needed newest SA.

MarginC/kame,MarginC/kame,MarginC/kame,MarginC/kame,MarginC/kame,MarginC/kame,MarginC/kame